Jon Oltsik: Vulnerability Management is a Business Issue
Industry researcher and analyst Jon Oltsik explains why vulnerability management should be considered a business issue and stop being viewed as a technical issue.
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
How to communicate cyber risk in commercial terms
Cyber risk is often discussed in technical language, often in a way which is difficult to decipher the real business impact. CVSS scores, vulnerabilities, attack paths and threat actors all have their place but for many decision‑makers, this language doesn’t translate into real-world business outcomes. Small business leaders and non-technical executives need to understand what cyber risk means for revenue, reputation and operational continuity.
AI Risk Governance Suite - office hours part 1
Kovrr’s new AI Risk Governance Suite gives enterprises the visibility, structure, and measurable control needed to manage GenAI responsibly across its full lifecycle. Join us for Office Hours: Part 1, where Or Amir will walk through the first three modules of the suite—showing how enterprises can gain real-time oversight and quantifiable insight into their AI landscape: Discover how these capabilities help enterprises align innovation with accountability—building a defensible foundation for responsible GenAI adoption.
Bitsight Threat Intelligence Briefing: Top TTPs Leveraged by Threat Actors in 2025
As the global cyber threat landscape evolves, adversaries continue to refine and adapt their tactics. Bitsight threat intelligence indicates that there are several tactics, techniques, and procedures (TTPs) that are most commonly and consistently leveraged by threat actors. These attacks are not isolated; they’re systemic.
SecurityScorecard 2025 End of Year Holiday Video
SecurityScorecard is the global leader in cybersecurity ratings and the only service with over 12 million companies continuously rated.
How to Build an Effective Insider Risk Management Program
Insider threats have become one of the most difficult and damaging challenges in cybersecurity. Unlike external attackers, insiders already have access to sensitive data and systems. Their actions often appear legitimate until it’s too late. Whether it’s a malicious employee stealing intellectual property or a well-meaning one accidentally leaking customer information, insider incidents are complex, nuanced, and often invisible to traditional security tools.
Featured Post
Security Shifts in 2026: Risk Moves Beyond the CISO
In 2026, cybersecurity will shift from being seen as the security team's responsibility to being part of how the entire company operates. Every business function will share ownership of risk. Finance, engineering, product, and marketing will all have clear roles in protecting customer trust.
Continuous Vendor Risk Monitoring: Real-Time Cyber Risk Visibility with Bitsight
Gain real-time visibility into cyber risks across your entire vendor ecosystem with Bitsight Continuous Monitoring. Continuously track third- and fourth-party security performance, uncover hidden vulnerabilities, and identify high-risk changes before they impact your business. Powered by the industry’s most comprehensive cyber risk data, Bitsight helps security and GRC teams respond faster to critical threats—including zero-day vulnerabilities—while improving vendor collaboration and strengthening overall supply chain resilience.
This or That. CEO Shares Favorite Cybersecurity Books in SecurityScorecard Bracket #cybersecurity
This or That. Favorite Books of SecurityScorecard Bracket, Cyber Edition is BACK – but this time it's Security Books! �� CEO and Co-Founder of SecurityScorecard Aleksandr Yampolskiy has another list of books you'll want to grab for some winter break reading and relaxation. Which ones are you hoping end up in your stocking this year? Drop a comment with your favorites and recommendations below.
An Industry Analyst's Take on Nucleus 3.0
In this episode of Nucleus Conversations, industry analyst and researcher Jon Oltsik unpacks the current state of exposure management, why so many organizations still struggle to manage cyber risk at scale, and the impact the recent Nucleus 3.0 releases will have for customers.